Moritz c5f1fdce0a Code-review follow-ups: policy, docs, seed_admin behaviour ... - Use OidcRoleSyncContext for set_role_from_oidc_sync; document JWT peek risk. - seed_admin without password sets Admin role on existing user (OIDC-only); update docs and test. - Fix DE translation for 'access this page'; add get? true comment in User.		2026-02-04 19:44:43 +01:00
..
accounts	User: fix last-admin validation and forbid non-admin role_id change	2026-02-04 09:19:47 +01:00
authorization	Add Role resource policies (defense-in-depth)	2026-02-04 14:07:38 +01:00
helpers	Add Role resource policies (defense-in-depth)	2026-02-04 14:07:38 +01:00
membership	Fix unlink-by-omission: on_missing :ignore, test, doc, string-key	2026-02-04 14:07:39 +01:00
membership_fees	MembershipFeeCycle: own_data read :linked via bypass and HasPermission scope	2026-02-04 09:20:10 +01:00
oidc_role_sync_config_test.exs	Add OIDC role sync config (OIDC_ADMIN_GROUP_NAME, OIDC_GROUPS_CLAIM)	2026-02-04 18:13:30 +01:00
oidc_role_sync_test.exs	Tests: accept single user or list from read_sign_in_with_rauthy (get? true)	2026-02-04 18:13:30 +01:00
release_test.exs	Code-review follow-ups: policy, docs, seed_admin behaviour	2026-02-04 19:44:43 +01:00